$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fe0af998-9b26-32c4-afef-96f10010a1e8.roa File: fe0af998-9b26-32c4-afef-96f10010a1e8.roa (raw, json) Hash identifier: ycqsMdIMdOY+HbgvpbAOjDB6IWFZP0xAvUx6oxCFQCQ= Subject key identifier: 5D:DE:EB:AC:FC:C4:08:E6:8F:7D:9C:35:57:2B:FB:A0:A0:EE:1E:7D Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a Certificate serial: 010D0C9F43285849A1B7F4326EF0888568B78F80 Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fe0af998-9b26-32c4-afef-96f10010a1e8.roa Signing time: Thu 24 Apr 2025 11:09:37 +0000 ROA not before: Thu 24 Apr 2025 11:09:37 +0000 ROA not after: Wed 23 Jul 2025 11:09:37 +0000 asID: 12041 IP address blocks: 65.22.178.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 11:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a1:b7:f4:32:6e:f0:88:85:68:b7:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a Validity Not Before: Apr 24 11:09:37 2025 GMT Not After : Jul 23 11:09:37 2025 GMT Subject: CN=5b73a875-3c62-4d00-84b6-d0ad4f890254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:48:67:97:d6:d8:c9:9e:3c:fb:45:76:2c:67: 84:81:3f:35:b8:a7:7c:f7:25:dd:2e:e1:66:6f:ec: 1a:87:07:6f:e5:69:70:08:13:48:9d:80:55:9d:51: db:5b:ae:6f:9a:35:dd:32:92:09:5a:5a:37:7a:de: dc:09:ef:d4:3a:bd:1a:fd:18:73:0e:da:f6:fa:09: 60:fe:b1:9f:4c:5f:15:4b:c6:c5:1a:11:38:b8:0a: 27:ae:0b:8a:12:31:19:3e:47:4a:1f:61:4c:b0:52: 90:52:bb:c2:1d:df:ce:23:dd:4c:ac:89:08:4c:96: 30:b9:4b:22:16:73:28:22:e7:fd:c8:30:e1:4a:0f: 32:18:53:a7:93:2d:52:08:25:ba:75:ef:b6:b3:38: 27:a0:5d:f6:ca:7d:df:5f:fa:1d:cc:ec:0f:a3:b2: 3f:08:28:c9:fe:5d:c1:1b:96:83:f9:a3:ab:4d:fa: 8f:dc:db:97:60:04:52:ac:54:48:dd:25:f4:34:d1: 5c:e8:3d:bc:23:17:c5:82:c2:16:1d:f5:8c:75:1b: 7b:a3:eb:25:dc:19:44:81:31:53:d3:db:71:b4:bb: df:03:d5:b7:9d:8f:b0:05:77:9a:91:d0:b8:c6:d7: a9:ad:76:dc:7d:71:1c:78:ad:3f:67:eb:e9:a0:8a: 55:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DE:EB:AC:FC:C4:08:E6:8F:7D:9C:35:57:2B:FB:A0:A0:EE:1E:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/fe0af998-9b26-32c4-afef-96f10010a1e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl X509v3 Authority Key Identifier: keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer sbgp-ipAddrBlock: critical IPv4: 65.22.178.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:13:53:2b:b5:54:0e:d6:ac:e5:dd:bc:f5:be:21:b6:a9:6f: 90:14:f0:06:22:a3:de:7b:9d:03:a7:2c:fa:be:4b:1f:2b:d4: a1:f5:72:1e:49:dd:48:47:51:5b:5b:84:31:9a:1b:47:92:f8: 4a:b5:da:92:20:0a:e6:77:9b:9e:a4:df:55:69:a3:90:12:0d: ec:b5:67:c4:46:44:f1:8f:aa:99:5e:22:a8:36:56:e7:df:e5: 3a:8e:37:67:08:bf:2a:47:96:f6:83:0c:d9:63:c4:61:21:ff: 5b:34:6e:b6:e2:46:cd:95:bc:72:b0:bf:8a:a3:fb:12:c0:51: ab:90:80:95:5b:82:6c:5f:87:5c:6b:38:f9:e7:ae:d8:2c:06: 1d:44:13:b6:a3:62:59:c9:e6:24:60:18:97:46:9d:8f:14:56: bd:eb:5c:f6:83:a6:7e:0f:8b:bf:05:ba:0e:0c:d0:ad:f2:1f: ef:0f:c1:ec:56:a2:7e:5e:2b:33:cb:0a:18:df:4c:57:02:07: 6c:a8:70:c8:79:e1:f8:7f:fb:5e:81:a1:db:1d:d4:7b:84:84: 11:e0:96:b9:f6:d4:dc:20:94:48:01:a7:d9:a6:29:38:6c:a7: 68:d9:a5:4a:74:82:5d:b9:e0:71:e3:58:80:cd:c7:03:37:7e: 25:91:d3:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmht/QybvCIhWi3j4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0 MDlhMB4XDTI1MDQyNDExMDkzN1oXDTI1MDcyMzExMDkzN1owLzEtMCsGA1UEAxMk NWI3M2E4NzUtM2M2Mi00ZDAwLTg0YjYtZDBhZDRmODkwMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3khnl9bYyZ48+0V2LGeEgT81uKd89yXdLuFm b+wahwdv5WlwCBNInYBVnVHbW65vmjXdMpIJWlo3et7cCe/UOr0a/RhzDtr2+glg /rGfTF8VS8bFGhE4uAonrguKEjEZPkdKH2FMsFKQUrvCHd/OI91MrIkITJYwuUsi FnMoIuf9yDDhSg8yGFOnky1SCCW6de+2szgnoF32yn3fX/odzOwPo7I/CCjJ/l3B G5aD+aOrTfqP3NuXYARSrFRI3SX0NNFc6D28IxfFgsIWHfWMdRt7o+sl3BlEgTFT 09txtLvfA9W3nY+wBXeakdC4xteprXbcfXEceK0/Z+vpoIpVBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3e66z8xAjmj32cNVcr+6Cg7h59MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvZmUwYWY5OTgtOWIyNi0z MmM0LWFmZWYtOTZmMTAwMTBhMWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQRayMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAUTUyu1VA7WrOXdvPW+Ibapb5AU8AYio957nQOnLPq+Sx8r1KH1ch5J 3UhHUVtbhDGaG0eS+Eq12pIgCuZ3m56k31Vpo5ASDey1Z8RGRPGPqpleIqg2Vuff 5TqON2cIvypHlvaDDNljxGEh/1s0brbiRs2VvHKwv4qj+xLAUauQgJVbgmxfh1xr OPnnrtgsBh1EE7ajYlnJ5iRgGJdGnY8UVr3rXPaDpn4Pi78Fug4M0K3yH+8PwexW on5eKzPLChjfTFcCB2yocMh54fh/+16Bodsd1HuEhBHglrn21NwglEgBp9mmKThs p2jZpUp0gl254HHjWIDNxwM3fiWR09g= -----END CERTIFICATE-----Generated at Thu May 8 11:27:02 2025 by rpki-client